Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
File: jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft (raw, json)
Hash identifier: L+r2226HIuM34Za5V1uDQKW1KVnPCOFXbBcML/8REoU=
Subject key identifier: 16:4B:55:9A:AE:70:E6:0A:8E:5A:5E:7B:E7:CB:0F:6A:6B:AA:E1:E8
Authority key identifier: 8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
Certificate issuer: /CN=8eb045110c41edb25931f4a523c39dd4c941d718
Certificate serial: 0194064629F2899A3FB33BFF28507EC0E2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 04:00:49 +0000
Manifest this update: Fri 27 Dec 2024 04:00:49 +0000
Manifest next update: Sat 28 Dec 2024 04:00:49 +0000
Files and hashes: 1: RwOMJxZGlKUf52-2VhDhTgffE7w.roa (hash: jBCtRCqKHEvQ+hfKtXHRnTwR74/dHQDINfDr1CrRlTw=)
2: jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl (hash: UX6RVgnHgxzlEW8M4oDNXsD2yTgsdw5rCw/xuNj+YWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:29:f2:89:9a:3f:b3:3b:ff:28:50:7e:c0:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb045110c41edb25931f4a523c39dd4c941d718
Validity
Not Before: Dec 27 04:00:49 2024 GMT
Not After : Dec 28 04:00:49 2024 GMT
Subject: CN=164b559aae70e60a8e5a5e7be7cb0f6a6baae1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:8a:b0:8c:7a:ac:8f:b5:5e:2a:df:75:45:
9f:ac:6e:7e:cb:ca:96:9e:ef:3e:89:75:3b:22:8b:
2e:8e:28:9f:2b:b1:88:db:c1:16:f8:f7:03:13:3e:
e9:7e:cc:58:77:d6:f0:fd:73:b1:9e:1a:20:97:be:
4d:e5:44:ab:10:4e:43:d0:56:a2:ff:e0:65:45:38:
29:91:d0:1d:86:e3:19:79:3b:a5:90:50:d5:5f:cb:
b5:0e:a7:4c:f0:6a:55:2f:66:51:cd:b9:f6:52:c5:
5d:42:28:25:4c:dc:77:fa:e1:65:96:7f:02:45:8d:
6a:18:6d:b2:ab:cf:13:05:4c:28:d9:37:ae:ca:59:
ad:1e:d0:16:58:48:7e:e2:7d:aa:a7:fe:df:2b:76:
8c:6c:c1:21:fe:0c:75:be:55:bc:77:a8:f7:c6:05:
5f:e1:e8:ef:0d:cd:5b:b4:2a:f7:e9:c7:84:22:9a:
05:10:e0:bf:18:7a:a0:8e:f4:ee:92:48:cb:77:9b:
85:07:2c:7d:45:f5:28:d0:3b:26:05:36:02:ab:cf:
9e:e6:45:d4:48:a5:bc:2e:d7:7c:62:f2:10:8d:de:
94:b6:ec:e2:a5:7f:4f:69:61:90:fc:aa:46:d0:00:
85:3c:19:8d:07:82:a7:6a:ae:57:b2:e3:c8:00:d2:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:55:9A:AE:70:E6:0A:8E:5A:5E:7B:E7:CB:0F:6A:6B:AA:E1:E8
X509v3 Authority Key Identifier:
keyid:8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:bf:d7:5b:ac:16:5c:19:d1:25:21:74:f8:f0:9f:e1:4b:
2b:74:ef:6f:85:f1:ad:9f:3b:04:b2:e2:da:8f:58:93:63:cf:
e6:2e:57:72:22:1a:94:12:06:b0:34:a6:ba:47:a1:df:69:fe:
b8:c5:37:f8:87:57:49:9e:eb:1b:81:30:18:84:e5:42:9f:49:
11:b8:99:7f:bc:7c:3b:b5:cf:b4:af:e7:b8:d8:e0:bc:75:41:
8e:6d:54:1c:5e:de:ac:47:c0:2c:70:34:0c:be:a1:b4:6b:a6:
0d:c8:5d:92:b5:5e:cf:29:aa:34:ad:99:6f:25:b7:4e:b4:b0:
c5:74:a7:84:3e:8d:2d:95:c4:67:1a:95:96:c6:28:9d:19:47:
8c:e6:9f:d0:39:d6:7b:72:2d:ef:a9:4c:43:4d:6a:2d:b8:f7:
b0:ae:66:62:14:66:1a:45:fe:2a:c3:00:04:ce:a8:38:0d:2c:
4c:36:47:ec:47:5b:e5:bd:d7:39:34:5f:78:9b:bb:b2:7f:b9:
da:22:76:a1:a6:0d:77:42:c6:8b:d9:f2:83:0c:c6:d9:84:bc:
21:50:14:e6:b4:5e:a3:e4:4f:3b:7d:4f:a9:a6:40:8a:f9:f6:
47:ec:20:72:33:44:54:c1:dc:dd:7f:21:d9:3d:2b:9c:b0:f4:
0b:61:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:33:37 2025 by rpki-client